mcr.microsoft.com/oss/v2/azure/workload-identity/webhook:v1.6.0
Base OS: azurelinux 3.0clean
Patched Image
ghcr.io/verity-org/oss/v2/azure/workload-identity/webhook:v1.6.0
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/oss/v2/azure/workload-identity/webhook:v1.6.0
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/oss/v2/azure/workload-identity/webhook:v1.6.0 \ --owner verity-org
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2026-34180HIGH
- Package
- openssl
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-45445HIGH
- Package
- openssl
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-7383HIGH
- Package
- openssl
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-9076HIGH
- Package
- openssl
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-34180HIGH
- Package
- openssl-libs
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-45445HIGH
- Package
- openssl-libs
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-7383HIGH
- Package
- openssl-libs
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-9076HIGH
- Package
- openssl-libs
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-34183MEDIUM
- Package
- openssl
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-42766MEDIUM
- Package
- openssl
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-42767MEDIUM
- Package
- openssl
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-45446MEDIUM
- Package
- openssl
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-34183MEDIUM
- Package
- openssl-libs
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-42766MEDIUM
- Package
- openssl-libs
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-42767MEDIUM
- Package
- openssl-libs
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-45446MEDIUM
- Package
- openssl-libs
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-42768LOW
- Package
- openssl
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
- CVE-2026-42768LOW
- Package
- openssl-libs
- Installed
- 3.3.7-2.azl3
- Fixed
- 3.3.7-3.azl3
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-34180 | openssl | 3.3.7-2.azl3 | 3.3.7-3.azl3 | HIGH |
| CVE-2026-45445 | openssl | 3.3.7-2.azl3 | 3.3.7-3.azl3 | HIGH |
| CVE-2026-7383 | openssl | 3.3.7-2.azl3 | 3.3.7-3.azl3 | HIGH |
| CVE-2026-9076 | openssl | 3.3.7-2.azl3 | 3.3.7-3.azl3 | HIGH |
| CVE-2026-34180 | openssl-libs | 3.3.7-2.azl3 | 3.3.7-3.azl3 | HIGH |
| CVE-2026-45445 | openssl-libs | 3.3.7-2.azl3 | 3.3.7-3.azl3 | HIGH |
| CVE-2026-7383 | openssl-libs | 3.3.7-2.azl3 | 3.3.7-3.azl3 | HIGH |
| CVE-2026-9076 | openssl-libs | 3.3.7-2.azl3 | 3.3.7-3.azl3 | HIGH |
| CVE-2026-34183 | openssl | 3.3.7-2.azl3 | 3.3.7-3.azl3 | MEDIUM |
| CVE-2026-42766 | openssl | 3.3.7-2.azl3 | 3.3.7-3.azl3 | MEDIUM |
| CVE-2026-42767 | openssl | 3.3.7-2.azl3 | 3.3.7-3.azl3 | MEDIUM |
| CVE-2026-45446 | openssl | 3.3.7-2.azl3 | 3.3.7-3.azl3 | MEDIUM |
| CVE-2026-34183 | openssl-libs | 3.3.7-2.azl3 | 3.3.7-3.azl3 | MEDIUM |
| CVE-2026-42766 | openssl-libs | 3.3.7-2.azl3 | 3.3.7-3.azl3 | MEDIUM |
| CVE-2026-42767 | openssl-libs | 3.3.7-2.azl3 | 3.3.7-3.azl3 | MEDIUM |
| CVE-2026-45446 | openssl-libs | 3.3.7-2.azl3 | 3.3.7-3.azl3 | MEDIUM |
| CVE-2026-42768 | openssl | 3.3.7-2.azl3 | 3.3.7-3.azl3 | LOW |
| CVE-2026-42768 | openssl-libs | 3.3.7-2.azl3 | 3.3.7-3.azl3 | LOW |
Original image reference
mcr.microsoft.com/oss/v2/azure/workload-identity/webhook:v1.6.0